Where
AND
-Infinity
0
Severity
4.2
AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Magento observable timing discrepancy vulnerability

1 / 2
Source: Packagist
First published (updated )
Severity
9.7
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Magento DOM-based Cross-site scripting vulnerability

1 / 2
Source: Packagist
First published (updated )
Severity
6.5
Path Traversal
AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Magento path traversal vulnerability

1 / 2
Source: Packagist
First published (updated )
Severity
6.5
AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Magento security mitigation bypass vulnerability

1 / 2
Source: Packagist
First published (updated )
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Magento 2 Community Edition XSS Vulnerability

1 / 2
Source: Packagist
First published (updated )
Severity
9.1
Malicious File Upload
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Magento 2 Community Edition RCE via Unsafe File Upload

1 / 2
Source: Packagist
First published (updated )
Severity
4.9
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Magento incorrect permissions vulnerability in the Integrations component

1 / 2
Source: Packagist
First published (updated )
Severity
2.7
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Magento incorrect user permissions vulnerability within the Inventory component

1 / 2
Source: Packagist
First published (updated )
Severity
4.3
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Magento incorrect permissions vulnerability in the Inventory module

1 / 2
Source: Packagist
First published (updated )
Severity
2.7
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Magento 2 Community Edition vulnerable to Improper Authorization

1 / 2
Source: Packagist
First published (updated )
Severity
6.5
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Magento 2 Community Edition Incorrect Authorization

1 / 2
Source: Packagist
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203